This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft File: 15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft (raw, json) Hash identifier: wxGtSVES0lWVWQ/iMXOYnU/dWLDQE159zusfVybrRzw= Subject key identifier: 7E:DD:23:7A:35:F2:07:F2:FB:C8:91:73:DE:B6:5A:9D:6A:FE:BB:FF Authority key identifier: D7:95:A7:25:9F:95:37:18:64:93:F4:82:D5:5C:EF:4B:64:B1:C4:35 Certificate issuer: /CN=d795a7259f9537186493f482d55cef4b64b1c435 Certificate serial: 019AF389942B8F66A8641D64F85270448299 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15WnJZ-VNxhkk_SC1VzvS2SxxDU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft Manifest number: 0F66 Signing time: Sat 06 Dec 2025 12:01:10 +0000 Manifest this update: Sat 06 Dec 2025 12:01:10 +0000 Manifest next update: Sun 07 Dec 2025 12:01:10 +0000 Files and hashes: 1: 15WnJZ-VNxhkk_SC1VzvS2SxxDU.crl (hash: zXL0S6iDVLLkgtjd0usj7qG8hSSrHQ0BLaaZlM0xAVk=) 2: ZllkD09XX0UjmpDgviQyHJhN0tQ.roa (hash: cXj6wMyOUxluunshyfWaumFrSwMD+oIYxgPqs4SCj1I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft rsync://rpki.ripe.net/repository/DEFAULT/15WnJZ-VNxhkk_SC1VzvS2SxxDU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:94:2b:8f:66:a8:64:1d:64:f8:52:70:44:82:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d795a7259f9537186493f482d55cef4b64b1c435 Validity Not Before: Dec 6 12:01:10 2025 GMT Not After : Dec 7 12:01:10 2025 GMT Subject: CN=7edd237a35f207f2fbc89173deb65a9d6afebbff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2f:e0:32:5a:4f:da:c6:fa:9e:f5:3a:8d:38: 1a:8c:4b:55:7e:4d:85:df:db:43:37:ba:83:f6:8d: b9:a9:49:4c:0d:64:24:19:c8:69:40:90:90:72:09: aa:44:fd:1c:77:c5:eb:1d:22:09:77:e8:dd:bf:47: 80:bd:d1:e7:33:a7:96:b4:7f:04:65:ca:7e:59:25: c1:3f:4b:6c:b4:d0:85:b9:63:62:8b:7a:3c:56:1f: 36:77:4a:e9:cb:ff:23:84:08:03:d7:5b:18:d1:d7: b5:85:43:bb:38:ef:c3:7e:61:dd:58:8c:ae:58:e8: 40:4a:e7:98:2c:b1:7b:6e:50:4d:a3:25:ec:c5:87: 00:b0:d5:3c:1a:f7:c7:62:d5:44:f5:ff:05:39:6e: 1e:d9:66:90:13:c1:06:a4:45:3d:d1:2c:bc:44:ec: 81:92:0a:72:60:70:97:26:07:cf:c6:0f:85:81:8b: 65:ee:c2:94:de:90:ec:56:58:ee:a8:3b:1b:c3:14: d8:cf:ea:90:ec:3b:4d:98:5c:ad:02:89:fd:c9:60: 4e:fe:05:d1:2d:47:df:12:3e:1e:c5:c0:db:b7:38: eb:bb:0a:06:38:ea:04:d9:32:83:eb:6c:15:26:0e: c6:1a:77:f0:da:51:38:12:0b:1b:b9:73:6e:9f:ab: 13:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:DD:23:7A:35:F2:07:F2:FB:C8:91:73:DE:B6:5A:9D:6A:FE:BB:FF X509v3 Authority Key Identifier: keyid:D7:95:A7:25:9F:95:37:18:64:93:F4:82:D5:5C:EF:4B:64:B1:C4:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15WnJZ-VNxhkk_SC1VzvS2SxxDU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:74:5e:19:51:ca:26:07:82:8b:c5:b6:ee:1f:39:77:19:b3: d9:f5:b5:b5:c0:fa:37:e9:70:cb:2a:63:a4:99:b8:54:22:73: 8d:ff:25:46:f1:1c:3e:30:22:3e:af:13:a6:bd:b8:cb:e2:4b: d9:62:8d:07:8d:5d:70:c6:f5:08:79:0c:15:b3:9b:cc:e8:73: df:61:2d:7c:a2:b4:10:42:ce:65:dd:f8:4f:c5:05:2e:06:e9: c4:6b:eb:c1:ed:57:56:9e:61:c9:dc:c8:bc:84:f1:54:df:37: b7:0e:2a:52:51:cd:19:9a:35:41:59:95:79:13:a4:ff:50:48: 66:c0:c1:f5:6b:fa:8d:32:d8:84:8d:26:cd:e1:c6:ee:a8:d1: 3f:17:44:a3:48:a4:a3:27:6b:d5:d8:b0:e6:c6:04:c2:3b:2d: 01:c3:88:7f:c0:1b:22:ef:8b:d6:03:d3:19:a6:6a:03:6f:4c: 3d:f0:1b:c0:e8:19:6c:c7:97:07:eb:23:89:13:a4:e3:f2:cb: 01:9c:83:64:96:a2:e0:ac:d0:59:f8:f3:d2:1f:e7:16:92:ed: 6f:43:9d:28:cd:3a:1f:bb:be:4c:78:40:e5:48:4e:a2:b4:d4: 6c:02:01:9b:d7:b6:75:61:41:b1:6d:26:75:ab:38:67:51:e5: f3:7e:cd:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziZQrj2aoZB1k+FJwRIKZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3OTVhNzI1OWY5NTM3MTg2NDkzZjQ4MmQ1NWNlZjRiNjRi MWM0MzUwHhcNMjUxMjA2MTIwMTEwWhcNMjUxMjA3MTIwMTEwWjAzMTEwLwYDVQQD Eyg3ZWRkMjM3YTM1ZjIwN2YyZmJjODkxNzNkZWI2NWE5ZDZhZmViYmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoC/gMlpP2sb6nvU6jTgajEtVfk2F 39tDN7qD9o25qUlMDWQkGchpQJCQcgmqRP0cd8XrHSIJd+jdv0eAvdHnM6eWtH8E Zcp+WSXBP0tstNCFuWNii3o8Vh82d0rpy/8jhAgD11sY0de1hUO7OO/DfmHdWIyu WOhASueYLLF7blBNoyXsxYcAsNU8GvfHYtVE9f8FOW4e2WaQE8EGpEU90Sy8ROyB kgpyYHCXJgfPxg+FgYtl7sKU3pDsVljuqDsbwxTYz+qQ7DtNmFytAon9yWBO/gXR LUffEj4excDbtzjruwoGOOoE2TKD62wVJg7GGnfw2lE4EgsbuXNun6sTfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH7dI3o18gfy+8iRc962Wp1q/rv/MB8GA1UdIwQY MBaAFNeVpyWflTcYZJP0gtVc70tkscQ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTVXbkpaLVZOeGhra19TQzFWenZTMlN4eERVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9kYWY4N2QtZGZhNC00YjE0LTkzZTIt YjA1ZGIwYmM5N2M0LzEvMTVXbkpaLVZOeGhra19TQzFWenZTMlN4eERVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9kYWY4N2QtZGZhNC00YjE0LTkzZTItYjA1ZGIwYmM5N2M0 LzEvMTVXbkpaLVZOeGhra19TQzFWenZTMlN4eERVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh3ReGVHK JgeCi8W27h85dxmz2fW1tcD6N+lwyypjpJm4VCJzjf8lRvEcPjAiPq8Tpr24y+JL 2WKNB41dcMb1CHkMFbObzOhz32EtfKK0EELOZd34T8UFLgbpxGvrwe1XVp5hydzI vITxVN83tw4qUlHNGZo1QVmVeROk/1BIZsDB9Wv6jTLYhI0mzeHG7qjRPxdEo0ik oydr1diw5sYEwjstAcOIf8AbIu+L1gPTGaZqA29MPfAbwOgZbMeXB+sjiROk4/LL AZyDZJai4KzQWfjz0h/nFpLtb0OdKM06H7u+THhA5UhOorTUbAIBm9e2dWFBsW0m das4Z1Hl837NPQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:57:27 2025 by rpki-client